Transferring FSMO Roles in Active Directory

1. Check current FSMO role holders

cmd:

netdom query fsmo

This command shows which domain controllers currently hold the five FSMO (Flexible Single Master Operations) roles.

---

2. Transfer the FSMO roles

Use PowerShell to transfer all FSMO roles to a new domain controller:

powershell:

Move-ADDirectoryServerOperationMasterRole -Identity "DC_NAME" -OperationMasterRole 0,1,2,3,4

Role numbers:

• 0 = PDC Emulator

• 1 = RID Master

• 2 = Infrastructure Master

• 3 = Schema Master

• 4 = Domain Naming Master

Example:

powershell:

Move-ADDirectoryServerOperationMasterRole -Identity "DC02" -OperationMasterRole 0,1,2,3,4

---

3. Verify the transfer

cmd:

netdom query fsmo

Check that all roles have been moved to the correct domain controller.

Windows 2012 WSUS GPO (Prohibit random boot after 3 days)

In my GPO I have the time set in two places.

For 2008 R2 and earlier: Computer Configuration/Policies/Administrative Templates/Windows Components/Windows Updates/Configure Automatic Updates/Scheduled install time

For 2012: Computer Configuration/Policies/Administrative Templates/Windows Components/Maintenance Scheduler/Automatic Maintenance Activation Boundary

With it set in both places all the servers install updates at the time I want.

Add Skype to Lync

New-CsPublicProvider -Identity Skype -ProxyFqdn federation.messenger.msn.com -IconUrl "https://images.edge.messenger.live.com/Messenger_16x16.png" -VerificationLevel 2 -Enabled 1

Citrix XenApp: How to change DB user for IMA

dsmaint config /user:XXXXXXXXXXXXX /pwd:XXXXXXXXXXX /dsn:"C:\Program Files (x86)\Citrix\Independent Management Architecture\mf20.dsn"

Lync Command

If you’ve not been disabling users in Lync while disabling them in AD, here’s a one liner to find those users:
Get-CsAdUser | ?{$_.UserAccountControl -match "AccountDisabled" -and $_.Enabled -eq $true} | ft Name,Enabled,SipAddress -auto

XenApp IMA_RESULT_FAILURE Event ID 3609

IMA service On XenApp 6.5 will not start, you get this:
Error: Failed to load plugin C:\Program
Files\Citrix\System32\Citrix\IMA\Subsystems\RADESessionSs.dll with error
IMA_RESULT_FAILURE

Run command: dsmaint recreaterade

The try to start the IMA service.

You should be OK :-)

Lync 2010 user account enable using Powershell

Use the Lync Server Management shell to administer the following Lync 2010 Server PowerShell cmdlets to perform the user account enable of move operations:
1. Enable-CsUser -Identity "Bill Anderson" -RegistrarPool "pool01.contoso.com" -SipAddressType EmailAddress -SipDomain contoso.com
} To view a list of examples for the usage of the Enable-CsUser Lync Server 2010 PowerShell cmdlet use the Lync Management Shell and enter the following PowerShell cmdlet: Get-Help Enable-CsUser -Examples
2. Move-CsUser -Identity "Bill Anderson" -Target "pool01.contoso.com"
} To view a list of examples for the usage of the Move-CsUser Lync Server 2010 PowerShell cmdlet use the Lync Management Shell and enter the following PowerShell cmdlet: Get-Help Move-CsUser -Example
3. Move-CsLegacyUser -Identity "Bill Anderson" -Target "pool01.contoso.com"
} To view a list of examples for the usage of the Move-CsLegacyUser Lync Server 2010 PowerShell cmdlet use the Lync Management Shell and enter the following PowerShell cmdlet: Get-Help Move-LegacyCsUser -Examples

Pasted from